Polish researchers find thousands of public websites vulnerable to cyberattacks

Thousands of public agencies and websites in Poland were found to be at risk of cyberattacks, according to a recent report by TechCrunch.

Two Polish security researchers, Robert Kruczek and Kamil Szczurowski, discovered over 10,000 affected public entities with 250,000 websites exhibiting security flaws. These included critical infrastructure like airports and hospitals, as well as government offices and judicial systems. The vulnerabilities stemmed from a combination of outdated vendor software, such as the Pad CMS content management system, and a lack of robust channels for reporting security issues. Some critical bugs were easily exploitable but were dismissed by vendors as minor inconveniences.

This research highlights significant risks to Poland's public services, particularly in light of recent suspected Russian-backed cyberattacks targeting the nation's energy and water sectors, which also exploited weak cybersecurity measures. The researchers reported their findings through official channels, aiming to improve the country's overall cyber defenses.

Source: TechCrunch